Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
File:                     eSf20AYql2a9WPDQdcTw0QJX5gY.mft (raw, json)
Hash identifier:          +MbvzbuBEE+4AK5LMvZyk2fRyFoVxY+CEu46PbDJtfM=
Subject key identifier:   E3:60:56:7F:1F:A0:2E:DF:57:B4:A5:B5:74:C9:A6:61:4C:01:75:88
Authority key identifier: 79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
Certificate issuer:       /CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Certificate serial:       01962FAB5B1690702DCC03B63780115953EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
Manifest number:          D5
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: eLGVH-huMc8rapx-zBQol7W6wbs.roa (hash: dBq0SVYODoTbT9noZtho2o8DhkqOnGRrlJMatl/O+48=)
                          2: eSf20AYql2a9WPDQdcTw0QJX5gY.crl (hash: ScKzhAn0WAc4pTnDi+DkTPYtM0HNt4AbJdyc8CM77lQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5b:16:90:70:2d:cc:03:b6:37:80:11:59:53:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=e360567f1fa02edf57b4a5b574c9a6614c017588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:99:24:7b:dd:ae:24:eb:c9:96:0c:56:be:
                    52:03:07:f0:87:8b:52:d6:e0:8b:57:63:47:db:bb:
                    78:a3:04:1c:4d:7c:a6:09:98:2b:3c:fd:31:ba:c3:
                    99:7a:37:4e:4e:01:6f:2d:ff:1e:a5:d5:df:8c:b5:
                    61:f4:47:12:4d:68:69:20:04:5e:54:18:8c:f8:a1:
                    d0:e7:0d:82:c9:ff:1e:42:40:37:49:29:b6:ee:1f:
                    bc:11:3b:39:3d:a5:35:d5:25:81:3f:d1:57:bf:5c:
                    01:b1:11:6c:e7:55:67:51:f2:65:e9:42:8b:db:2d:
                    fe:07:8c:50:a3:c0:a8:c0:26:9e:57:9b:b1:dc:d2:
                    a9:43:cc:56:cb:fc:f0:5f:06:36:82:b0:0a:10:c9:
                    73:4a:98:94:f6:d5:3a:cb:ea:72:5a:9d:d7:97:0f:
                    39:8e:53:cd:bf:f0:53:53:06:31:74:34:09:96:31:
                    70:9e:07:40:bf:9b:7a:49:52:ad:fb:b8:65:f5:96:
                    1f:96:89:b9:9b:cb:db:14:19:34:ef:4a:13:35:b9:
                    02:9e:60:3f:b1:80:3e:5e:39:ad:76:ab:63:9d:27:
                    9a:61:c7:5b:7f:f2:26:23:66:b4:40:37:d2:94:cc:
                    e8:b0:fa:49:ae:f2:d1:29:13:15:5e:35:1e:d6:97:
                    a4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:60:56:7F:1F:A0:2E:DF:57:B4:A5:B5:74:C9:A6:61:4C:01:75:88
            X509v3 Authority Key Identifier:
                keyid:79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:03:9e:0d:8b:7c:b0:a0:21:00:17:a7:2a:2a:59:2d:ca:69:
         14:63:bb:d3:a5:8b:ec:d1:96:ae:fa:55:5a:a3:87:50:aa:30:
         d1:e5:00:ad:6a:e7:4e:66:e7:d1:34:20:f9:07:73:38:97:74:
         91:c4:d3:cc:b9:4f:55:31:79:20:71:ca:f3:50:ed:d4:58:55:
         d2:a0:da:5b:72:9b:58:d4:42:71:9a:a4:4f:4c:39:44:69:d6:
         8d:26:37:cd:5a:b9:2c:de:30:e6:3e:69:b8:da:1a:a4:1f:ed:
         48:02:8c:fd:9c:2e:e3:20:c4:54:b9:b2:a1:f9:46:b4:21:43:
         2b:31:b4:81:b7:fd:04:7f:00:28:09:3c:eb:80:ea:c4:41:54:
         ff:be:a3:55:32:b7:d8:2a:9c:5d:f6:64:23:0e:40:c1:e4:9d:
         18:41:f2:8c:14:c3:e4:c5:87:bb:9e:2e:21:46:40:25:ed:fd:
         0d:3b:0a:3e:b9:f6:c0:1a:2b:89:c7:3c:80:45:f5:ea:d9:5d:
         68:7a:04:6d:64:f9:ac:6c:f9:8c:62:e4:b2:a9:5d:1e:18:16:
         b3:e0:ac:95:da:8a:fd:2e:d8:aa:eb:b7:8b:01:17:a8:a8:ae:
         e7:4e:00:e5:75:60:51:19:00:fd:03:39:8e:64:c5:45:52:dd:
         4f:52:3c:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1sWkHAtzAO2N4ARWVPrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MjdmNmQwMDYyYTk3NjZiZDU4ZjBkMDc1YzRmMGQxMDI1
N2U2MDYwHhcNMjUwNDEzMTUwMTIxWhcNMjUwNDE0MTUwMTIxWjAzMTEwLwYDVQQD
EyhlMzYwNTY3ZjFmYTAyZWRmNTdiNGE1YjU3NGM5YTY2MTRjMDE3NTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOCZJHvdriTryZYMVr5SAwfwh4tS
1uCLV2NH27t4owQcTXymCZgrPP0xusOZejdOTgFvLf8epdXfjLVh9EcSTWhpIARe
VBiM+KHQ5w2Cyf8eQkA3SSm27h+8ETs5PaU11SWBP9FXv1wBsRFs51VnUfJl6UKL
2y3+B4xQo8CowCaeV5ux3NKpQ8xWy/zwXwY2grAKEMlzSpiU9tU6y+pyWp3Xlw85
jlPNv/BTUwYxdDQJljFwngdAv5t6SVKt+7hl9ZYflom5m8vbFBk070oTNbkCnmA/
sYA+XjmtdqtjnSeaYcdbf/ImI2a0QDfSlMzosPpJrvLRKRMVXjUe1pekJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONgVn8foC7fV7SltXTJpmFMAXWIMB8GA1UdIwQY
MBaAFHkn9tAGKpdmvVjw0HXE8NECV+YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmE5YjEtNTUyYi00NmVjLWEzMWIt
YzVkMGNiN2I3ZGY1LzEvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kNmE5YjEtNTUyYi00NmVjLWEzMWItYzVkMGNiN2I3ZGY1
LzEvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQOeDYt8
sKAhABenKipZLcppFGO706WL7NGWrvpVWqOHUKow0eUArWrnTmbn0TQg+QdzOJd0
kcTTzLlPVTF5IHHK81Dt1FhV0qDaW3KbWNRCcZqkT0w5RGnWjSY3zVq5LN4w5j5p
uNoapB/tSAKM/Zwu4yDEVLmyoflGtCFDKzG0gbf9BH8AKAk864DqxEFU/76jVTK3
2CqcXfZkIw5AweSdGEHyjBTD5MWHu54uIUZAJe39DTsKPrn2wBoricc8gEX16tld
aHoEbWT5rGz5jGLksqldHhgWs+CsldqK/S7Yquu3iwEXqKiu504A5XVgURkA/QM5
jmTFRVLdT1I8Tg==
-----END CERTIFICATE-----